This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/jB65z1ohai0nkr6HUNtdxzCDiIk.roa File: jB65z1ohai0nkr6HUNtdxzCDiIk.roa (raw, json) Hash identifier: oekkGHlROfUOtUp+dGMPBMZMBRrWYIWnNkSbT4P6/v8= Subject key identifier: 8C:1E:B9:CF:5A:21:6A:2D:27:92:BE:87:50:DB:5D:C7:30:83:88:89 Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Certificate serial: 019B78353A03095B97ED73A086B736138A62 Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/jB65z1ohai0nkr6HUNtdxzCDiIk.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208478 IP address blocks: 2a0e:73c2:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3a:03:09:5b:97:ed:73:a0:86:b7:36:13:8a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c1eb9cf5a216a2d2792be8750db5dc730838889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:9d:a9:92:a6:06:d3:c3:6c:43:e6:fb:b9: d6:80:22:c7:84:d6:d0:08:03:f5:c7:6f:2f:41:5a: 3e:52:a7:79:e9:21:99:bc:9d:22:fc:4f:07:dd:66: 14:88:b8:7f:65:0e:88:58:ae:55:5e:aa:a6:c2:e6: e3:12:e9:b5:fe:95:f6:dd:85:11:ef:f1:f3:ac:52: b2:b0:44:be:4f:2a:73:10:f3:b3:b6:6b:aa:df:00: 6d:d6:12:2f:81:74:93:6e:ce:a9:c1:21:42:d7:57: 30:e6:24:c2:ea:17:8b:2f:3f:a4:d1:03:04:80:7b: dc:55:5d:d7:cd:7a:6b:8c:0e:2e:e9:f8:5e:84:24: ae:86:d7:35:f6:0b:13:04:d1:99:0f:82:49:39:73: 89:47:fe:60:5d:d6:50:aa:ca:9d:73:2c:a7:bb:9e: d6:2f:55:80:01:8c:76:d7:9c:47:b1:ae:7c:bc:18: 13:b9:d2:b7:b3:73:12:0d:52:3d:d0:dc:b7:67:6b: fd:9a:7c:9c:4b:39:fa:eb:f9:2e:d1:cc:62:1f:c7: 7c:aa:86:ea:ce:eb:94:3b:3e:8a:03:63:b5:39:83: 94:3e:16:3c:19:0f:dc:8c:f7:74:6b:5e:3b:32:ba: 03:42:70:5e:84:95:99:d7:29:35:cb:6e:e0:3f:a2: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1E:B9:CF:5A:21:6A:2D:27:92:BE:87:50:DB:5D:C7:30:83:88:89 X509v3 Authority Key Identifier: keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/jB65z1ohai0nkr6HUNtdxzCDiIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:73c2:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 4f:db:d0:f3:b3:dd:65:5e:6e:eb:83:00:f2:42:c6:aa:40:33: 59:69:50:1a:d5:79:9e:87:f9:fb:d9:08:da:1f:27:4c:65:f3: 4a:dd:7e:41:f1:2a:d6:8f:51:63:fe:2b:0a:61:72:3f:82:43: f8:aa:ce:84:c8:49:13:30:3b:f5:94:6f:0f:44:8f:f4:21:60: ba:92:40:f3:15:8a:2f:51:98:50:ef:d7:11:0a:88:f8:fa:f9: 28:4d:f7:ac:88:ec:5f:a3:ab:25:31:c0:ff:15:c7:cb:52:a0: ff:03:ed:2c:06:8a:f5:ca:83:0a:74:1e:ee:c0:e2:eb:e2:b1: 40:d4:1a:b3:25:44:40:b7:b9:1c:83:2d:aa:c9:64:01:f5:6b: e9:b2:5e:5b:4b:49:b1:d9:52:26:2f:6c:ea:0d:ae:05:8f:68: 37:9b:75:50:da:d5:ac:f1:6f:5c:99:4d:f8:37:de:66:4f:db: be:39:3c:a4:2b:1d:71:91:92:10:c9:72:b3:6e:ae:41:9f:89: 44:e0:a8:d7:04:4b:b9:06:17:5c:4e:f9:d9:f8:3c:4f:f8:c5: f1:30:87:16:8c:6a:84:34:3b:ce:2b:e2:27:91:9c:69:ec:aa: f3:cc:73:5c:e0:8b:9a:b2:fa:97:60:e1:1f:38:41:2b:0f:a4: 6e:9c:22:5e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NToDCVuX7XOghrc2E4piMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjZlZWVhZGQ0YzBlZTU1YjM1OTRhNTk2ZTY3MjIwODE5 YzE4ZDUwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzFlYjljZjVhMjE2YTJkMjc5MmJlODc1MGRiNWRjNzMwODM4ODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljOdqZKmBtPDbEPm+7nWgCLHhNbQ CAP1x28vQVo+Uqd56SGZvJ0i/E8H3WYUiLh/ZQ6IWK5VXqqmwubjEum1/pX23YUR 7/HzrFKysES+TypzEPOztmuq3wBt1hIvgXSTbs6pwSFC11cw5iTC6heLLz+k0QME gHvcVV3XzXprjA4u6fhehCSuhtc19gsTBNGZD4JJOXOJR/5gXdZQqsqdcyynu57W L1WAAYx215xHsa58vBgTudK3s3MSDVI90Ny3Z2v9mnycSzn66/ku0cxiH8d8qobq zuuUOz6KA2O1OYOUPhY8GQ/cjPd0a147MroDQnBehJWZ1yk1y27gP6ImgwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIweuc9aIWotJ5K+h1DbXccwg4iJMB8GA1UdIwQY MBaAFCMm7urdTA7lWzWUpZbmciCBnBjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTkt MzM0MTU5NjdjMjEzLzEvakI2NXoxb2hhaTBua3I2SFVOdGR4ekNEaUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hNTk4MGQtNjVmNC00NTczLTk3NTktMzM0MTU5NjdjMjEz LzEvSXlidTZ0MU1EdVZiTlpTbGx1WnlJSUdjR05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5zwv// MA0GCSqGSIb3DQEBCwUAA4IBAQBP29Dzs91lXm7rgwDyQsaqQDNZaVAa1Xmeh/n7 2QjaHydMZfNK3X5B8SrWj1Fj/isKYXI/gkP4qs6EyEkTMDv1lG8PRI/0IWC6kkDz FYovUZhQ79cRCoj4+vkoTfesiOxfo6slMcD/FcfLUqD/A+0sBor1yoMKdB7uwOLr 4rFA1BqzJURAt7kcgy2qyWQB9Wvpsl5bS0mx2VImL2zqDa4Fj2g3m3VQ2tWs8W9c mU34N95mT9u+OTykKx1xkZIQyXKzbq5Bn4lE4KjXBEu5BhdcTvnZ+DxP+MXxMIcW jGqENDvOK+InkZxp7KrzzHNc4IuasvqXYOEfOEErD6RunCJe -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:04 2026 by rpki-client